Re: [PATCH] Response to TRACE garbled from EBCDIC platform

2008-05-28 Thread Martin Kraemer
On Thu, May 15, 2008 at 01:54:35PM -0400, David Jones wrote: The response to TRACE when TraceEnable Off is not used on an EBCDIC platform is partially in ASCII and partially in EBCDIC (part readable, part garbage). In the 2.2.8 version I recently ported to a /390 machine, this error does not

[PATCH] mod_proxy.c: ProxyDomain should not rewrite IPv6 address literals

2008-02-29 Thread Martin Kraemer
When sending a proxy request of the form GET http://[3ffe:1:1001:3000:230:5ff:fe05:3c3c]/server-status HTTP/1.0 through the httpd-2.x mod_proxy.c code, while a directive ProxyDomain .my.dom.ain is in effect, the request is redirected to Location:

Re: PR42829: graceful restart with multiple listeners using prefork MPM can result in hung processes

2008-01-18 Thread Martin Kraemer
On Fri, Jan 04, 2008 at 02:42:05PM +0100, Stefan Fritsch wrote: Hi, this bug can be quite annoying because of the resources used by the hung processes. It happens e.g. under Linux when epoll is used. The patch from http://issues.apache.org/bugzilla/show_bug.cgi?id=42829#c14 has been in

Re: [VOTE] Apache HTTP Server 1.3.41, 2.0.63 and 2.2.8

2008-01-15 Thread Martin Kraemer
[+1] Apache HTTP Server 1.3.41 on SINIX-i386 [+1] Apache HTTP Server 1.3.41 on ReliantUNIX-mips [+1] Apache HTTP Server 1.3.41 on BS2000 I tried to compile these with the latest mod_ssl from www.mod_ssl.org but they dumped core. Without EAPI and SSL, everything works like a

Re: [VOTE] Apache HTTP Server 1.3.41, 2.0.63 and 2.2.8

2008-01-14 Thread Martin Kraemer
[+1] Apache HTTP Server 2.2.8 on SINIX-i386 -- [EMAIL PROTECTED]| Fujitsu Siemens http://www.fujitsu-siemens.com/imprint.html | 81730 Munich, Germany

Re: [VOTE] Apache HTTP Server 1.3.41, 2.0.63 and 2.2.8

2008-01-13 Thread Martin Kraemer
[ ] Apache HTTP Server 1.3.41 [ ] Apache HTTP Server 2.0.63 [+1] Apache HTTP Server 2.2.8 on BS2000 Martin -- [EMAIL PROTECTED]| Fujitsu Siemens http://www.fujitsu-siemens.com/imprint.html | 81730 Munich, Germany

Re: Pre-release test tarballs of httpd 1.3.40, 2.0.62 and 2.2.7 available

2008-01-08 Thread Martin Kraemer
On Fri, Jan 04, 2008 at 03:00:46PM -0500, Jim Jagielski wrote: The latest versions of all 3 variants of Apache HTTP Server (1.3.40, 2.0.62 and 2.2.7) have been tagged. 2.2.7 tested and working on BS2000 and FreeBSD-4.x. Martin -- [EMAIL PROTECTED]| Fujitsu Siemens

proxy-SSL-woes in 2.2.7 [was:Re: Pre-release test tarballs of httpd 1.3.40, 2.0.62 and 2.2.7 available]

2008-01-08 Thread Martin Kraemer
Okay, I found a new bug in the 2.2.7 proxy while testing SSL and non-SSL CONNECTions both with and without a ProxyRemote directive. verbose To recap, totally different things happen in the presence or absence of a ProxyRemote: * with ProxyRemote, the web server acts as a forwarder, and

Re: proxy-SSL-woes in 2.2.7 [was:Re: Pre-release test tarballs of httpd 1.3.40, 2.0.62 and 2.2.7 available]

2008-01-08 Thread Martin Kraemer
On Tue, Jan 08, 2008 at 08:37:10PM +0100, Ruediger Pluem wrote: Very, very strange because in the SSL proxy forward case you 1. use mod_proxy_connect which wasn't touched in 2.2.x for the last 11 month, so I doubt that this is a regression- I must confess that I have always tested the

Re: [PATCH] Case insensitive username matching for WIN32 and BS2000 (and OS2?)

2007-12-05 Thread Martin Kraemer
On Tue, Dec 04, 2007 at 06:19:52PM -0600, William A. Rowe, Jr. wrote: So... * if there is a user flag to allow case insensitive user names, that must be a directive at the auth provider Yep, but some providers have no choice but to tag their name as case insensitive (e.g.,

Re: [PATCH] Case insensitive username matching for WIN32 and BS2000 (and OS2?)

2007-12-05 Thread Martin Kraemer
On Tue, Dec 04, 2007 at 05:54:16PM +0100, Guenter Knauf wrote: f.e. I think that if you use file-based auth on Win32 why shouldnt that be case-sensitive if the user wants that? You are right for the dbm or file-based auth. But I was thinking of, e.g., the Require file-owner hugo requirement,

[PATCH] Case insensitive username matching for WIN32 and BS2000 (and OS2?)

2007-12-04 Thread Martin Kraemer
Hi, The usernames in WIN32 are, IIRC , case insensitive (and they are in BS2000, and perhaps in OS2?). Some of the username auth code uses tables, and thus case insensitive matching, but at some places, user names are compared literally. The appended patch tries to make these literal

Re: How to kill 1.3?

2007-10-04 Thread Martin Kraemer
On Wed, Oct 03, 2007 at 03:15:11PM -0400, Joshua Slive wrote: In particular, I don't think our main page or download page is currently clear enough about the status of 1.3 development. I think we should say something like: The Apache HTTP Server version 1.3 is not recommended and is not

Plans to release binaries?

2007-09-17 Thread Martin Kraemer
Hi, A customer asked me whether WIN32 binaries for the new 2.0.61 and 2.2.6 would be offered soonish by the ASF, and I don't really want to send him to some other place offering binaries. Are there plans to release them soon, or do we wait for 2.2.7 and a settled fastcgi interface? No hurry,

Re: Favicon.ico

2007-09-17 Thread Martin Kraemer
On Wed, Sep 12, 2007 at 02:07:55AM -0400, Jack Gostl wrote: First thing I tired. The icon shows up. If the icon type is NOT Microsoft's Resource Image type, perhaps a link href=images/favicon.ico rel=shortcut icon type=image/png / in the HTML head helps to help the browser identify the real

Re: svn commit: r573264 - /httpd/httpd/trunk/include/scoreboard.h

2007-09-10 Thread Martin Kraemer
On Mon, Sep 10, 2007 at 05:02:52PM +0200, Plüm, Rüdiger, VF-Group wrote: 1. IMHO requires a minor bump. 2. Why messing around with lb_score any longer? Instead of ... Sorry for stepping in on the discussion -- but Jim has tried to clean the code, JFC has helped providing alternative patches,

Re: svn commit: r573264 - /httpd/httpd/trunk/include/scoreboard.h

2007-09-07 Thread Martin Kraemer
On Fri, Sep 07, 2007 at 10:30:13AM +0200, jean-frederic clere wrote: That is going to break: In mod_proxy.h: int ap_proxy_lb_workers(void); In server/scoreboard.c: +++ static APR_OPTIONAL_FN_TYPE(ap_proxy_lb_workers) *proxy_lb_workers; +++ Yes, it breaks:

Re: svn commit: r573264 - /httpd/httpd/trunk/include/scoreboard.h

2007-09-07 Thread Martin Kraemer
On Fri, Sep 07, 2007 at 12:29:05PM +0200, jean-frederic clere wrote: I think I have patched it. Could you try it? Index: modules/proxy/proxy_util.c === ... Yep, thanks, that fixes it for me too. +1 from me. Martin --

Re: svn commit: r572298 - /httpd/site/trunk/dist/tools/release.sh

2007-09-04 Thread Martin Kraemer
On Mon, Sep 03, 2007 at 12:44:06PM +, [EMAIL PROTECTED] wrote: Author: jim Date: Mon Sep 3 05:44:06 2007 New Revision: 572298 URL: http://svn.apache.org/viewvc?rev=572298view=rev Log: 2.2 and later will wait for this APR tag... -apr_tag=1.2.9 -apu_tag=1.2.8 +

Re: make: *** [flood.lo] Error 1

2007-09-04 Thread Martin Kraemer
On Tue, Sep 04, 2007 at 12:07:04PM +0300, Villem Alari wrote: I have error and can't install Flood. Error is: /usr/share/apr-1.0/build/libtool --silent --mode=compile gcc-g - O2 -pipe -Wall -g -O2 -pthread-DLINUX=2 -D_REENTRANT - D_GNU_SOURCE -D_LARGEFILE64_SOURCE

Re: make: *** [flood.lo] Error 1

2007-09-04 Thread Martin Kraemer
On Tue, Sep 04, 2007 at 01:11:24PM +0300, Villem Alari wrote: On 04.09.2007, at 12:29, Martin Kraemer wrote: On Tue, Sep 04, 2007 at 12:07:04PM +0300, Villem Alari wrote: I have error and can't install Flood. Error is: /usr/share/apr-1.0/build/libtool --silent --mode=compile gcc- g

Re: [PATCH] htpasswd.c: New -Ssalt option?

2007-09-03 Thread Martin Kraemer
On Mon, Sep 03, 2007 at 02:13:20PM +0200, Martin Kraemer wrote: The Topics addressed in this patch are: ... --- httpd-2.2.x/support/htpasswd.cWed Jul 12 05:38:44 2006 +++ /tmp/htpasswd.c Mon Sep 3 13:22:05 2007 @@ -101,6 +101,7 @@ The patch is against 2.2.x BTW. Martin -- [EMAIL

Re: make: *** [flood.lo] Error 1

2007-09-03 Thread Martin Kraemer
On Mon, Sep 03, 2007 at 03:56:21PM +0300, Villem Alari wrote: Hi! I have error and can't install Flood. Error is: /usr/share/apr-1.0/build/libtool --silent --mode=compile gcc-g - O2 -pipe -Wall -g -O2 -pthread-DLINUX=2 -D_REENTRANT - D_GNU_SOURCE -D_LARGEFILE64_SOURCE

Re: [PATCH] proxy/ajp_header.c: Fix header detection

2007-08-31 Thread Martin Kraemer
On Thu, Aug 30, 2007 at 06:24:55PM +0200, Rainer Jung wrote: The patch replaces the memcmp by a strcmp to check for the trailing NIL character, too. For mod_jk the problem you found here is the same. Thanks for finding it! We finally applied a slightly different patch, by keeping the

[PATCH] Eliminate 13 in modules/aaa/mod_authn_dbd.c / modules/aaa/mod_authnz_ldap.c

2007-08-31 Thread Martin Kraemer
From the 2.2.x STATUS doc: * mod_authn_dbd: Export any additional columns queried in the SQL select into the environment with the name AUTHENTICATE_COLUMN. This brings mod_authn_dbd behaviour in line with mod_authnz_ldap. Trunk:

Re: [PATCH] Eliminate 13 in modules/aaa/mod_authn_dbd.c / modules/aaa/mod_authnz_ldap.c

2007-08-31 Thread Martin Kraemer
On Fri, Aug 31, 2007 at 12:54:44PM +0200, Graham Leggett wrote: Here's a patch to eliminate the 13, and to improve portability to EBCDIC machines by using apr_toupper(). Thanks for this - the fooness really needed to be sorted out before it was rolled out over the other authn mechanisms.

Re: [PATCH] Eliminate 13 in modules/aaa/mod_authn_dbd.c / modules/aaa/mod_authnz_ldap.c

2007-08-31 Thread Martin Kraemer
On Fri, Aug 31, 2007 at 05:09:34PM +0200, Martin Kraemer wrote: Should I commit, or do you? Forgot to mention that I meant: commit to trunk. For 2.2.x, I'd prefer you do it. Martin -- [EMAIL PROTECTED]| Fujitsu Siemens http://www.fujitsu-siemens.com/imprint.html | 81730

[PATCH] mod_ssl: Stricter directive context checking

2007-08-30 Thread Martin Kraemer
In mod_ssl's directive parser, many directives do not check the allowed contexts, thus misleading the user that, e.g., in the configuration... LimitExcept GET OPTIONS Require valid-user IfModule ssl_module SSLRequireSSL /IfModule /LimitExcept the SSLRequireSSL directive

Re: svn commit: r571209 - /httpd/httpd/branches/2.2.x/modules/proxy/ajp_header.c

2007-08-30 Thread Martin Kraemer
On Thu, Aug 30, 2007 at 11:36:18AM -0400, Jim Jagielski wrote: Are these really candidates for bypassing the normal backport process from trunk?? --- httpd/httpd/branches/2.2.x/modules/proxy/ajp_header.c (original) +++ httpd/httpd/branches/2.2.x/modules/proxy/ajp_header.c Thu Aug 30

Re: svn commit: r571209 - /httpd/httpd/branches/2.2.x/modules/proxy/ajp_header.c

2007-08-30 Thread Martin Kraemer
On Thu, Aug 30, 2007 at 11:36:18AM -0400, Jim Jagielski wrote: Are these really candidates for bypassing the normal backport process from trunk?? I committed the other change (memcmp-strcmp) righty now on trunk. And yes, I am aware that I should have done that first, sorry. Martin -- [EMAIL

Re: [PATCH] proxy/ajp_header.c: Fix header detection

2007-08-30 Thread Martin Kraemer
On Thu, Aug 30, 2007 at 04:45:38PM +0200, Rainer Jung wrote: I committed Martins patch to mod_jk a couple of minutes ago. Thanks Martin! The Content-Type part of the patch didn't apply to mod_jk though. ... -if (memcmp(stringname, Content-Type, 12) == 0) { +if

Re: Meaning of man/man8/?

2007-03-29 Thread Martin Kraemer
On Wed, Mar 28, 2007 at 10:31:47PM +0200, André Malo wrote: * William A. Rowe, Jr. wrote: Beyond that, apxs doesn't seem to quite fit that role. ab.8apxs.8 httpd.8 rotatelogs.8 apachectl.8 htcacheclean.8 logresolve.8suexec.8 Of the remainder,

[PATCH] apr-util: SSL detection (static libs) incomplete?

2007-03-29 Thread Martin Kraemer
Hi everyboby, I tried to build httpd-2.3-dev against a static SSL lib today and was astonished to see apr-util's configure fail when trying to detect SSL_accept(). Thinking it might be a missing reference to -lz (because my libssl is built with compresseion enabled) I checked the config log and

[PATCH] mod_disk_cache fails to compile [Was: svn commit: r468373 - in /httpd/httpd/trunk: CHANGES modules/cache/mod_cache.c modules/cache/mod_cache.h modules/cache/mod_disk_cache.c modules/cache/mod_

2006-11-02 Thread Martin Kraemer
On Fri, Oct 27, 2006 at 05:05:29PM +0200, Graham Leggett wrote: On Fri, October 27, 2006 4:38 pm, Davi Arnaut wrote: Where is pdconf ? Check out all those APR_HAS_SENDFILE. Aaargh... will fix. Still, since 2 days, again mod_disk_cache fails to compile on platforms with sendfile (e.g.,

Re: [PATCH] mod_disk_cache fails to compile [Was: svn commit: r468373 - in /httpd/httpd/trunk: CHANGES modules/cache/mod_cache.c modules/cache/mod_cache.h modules/cache/mod_disk_cache.c modules/cache/

2006-11-02 Thread Martin Kraemer
On Thu, Nov 02, 2006 at 01:00:29PM +0200, Graham Leggett wrote: On Thu, November 2, 2006 12:34 pm, Martin Kraemer wrote: Still, since 2 days, again mod_disk_cache fails to compile on platforms with sendfile (e.g., FreeBSD). Oops - I forgot to mention the branch I'm working on - it's a bug

Re: [PATCH] mod_disk_cache fails to compile [Was: svn commit: r468373 - in /httpd/httpd/trunk: CHANGES modules/cache/mod_cache.c modules/cache/mod_cache.h modules/cache/mod_disk_cache.c modules/cache/

2006-11-02 Thread Martin Kraemer
On Thu, Nov 02, 2006 at 01:00:29PM +0200, Graham Leggett wrote: If you can send more details, I can get to the bottom of it - fails to compile doesn't tell me anything useful. mod_disk_cache.c: In function `open_new_file': mod_disk_cache.c:1304: `pdconf' undeclared (first use in this function)

[PATCH] htcacheclean requires

2006-10-16 Thread Martin Kraemer
At the moment, htcacheclean.c does not compile because it includes mod_disk_cache.h (which in turn needs apr_buckets.h included for the typedef of apr_bucket_refcount), but apr_buckets.h is not included anywhere. The attached patch fixes the problem, but: is it okay to include apr_buckets.h from

OpenSSL with zlib support breaks SSL detection in apache-2.3-dev

2006-01-23 Thread Martin Kraemer
Hi everyone, While debugging a recent openssl library which was built with zlib support (that is, openssl combines compression and encryption), I noticed that such a lib breaks the current OpenSSL detection code in apache-2.3 (at least, probably others too). The configure program prints...

[PATCH] Broken APR_CHECK_APR_DEFINE() macro in test for APR_HAVE_IPV6 and APR_HAS_RANDOM

2005-11-02 Thread Martin Kraemer
Hi, The APR_CHECK_APR_DEFINE() macro implements a test for an APR define, used for instance in the configure script to test for the availability of APR_HAVE_IPV6 and APR_HAS_RANDOM (why once _HAVE_ and once _HAS_ btw?). This macro is broken because it uses the equivalent of the following:

Re: [PATCH] Broken APR_CHECK_APR_DEFINE() macro in test for APR_HAVE_IPV6 and APR_HAS_RANDOM

2005-11-02 Thread Martin Kraemer
On Wed, Nov 02, 2005 at 12:43:42PM +, Joe Orton wrote: Converting all use of $() when adding to INCLUDES in configure to ${} so the paths get expanded immediately would seem like the best fix unless there's some reason why that won't work (I can't think of any). As I said, you need a 2nd

[PATCH] mod_setenvif.c [was: ssl_ext_lookup #2]

2005-09-22 Thread Martin Kraemer
On Tue, Sep 20, 2005 at 05:33:30PM +0100, Joe Orton wrote: SetEnvIf SSL_PeerExtList(1.3.6.1.4.1.18060.1) \ (committers|administrators) \ ThisUserHasAValidCert=$1 Later on, you can control access (in dir context, if desired) by allow from

Re: [PATCH] mod_setenvif.c [was: ssl_ext_lookup #2]

2005-09-22 Thread Martin Kraemer
On Thu, Sep 22, 2005 at 02:27:37PM +0100, Joe Orton wrote: I can't see how jumping through hoops with mod_setenvif to get mod_ssl to export new env vars makes sense. True. +1 too. Martin -- [EMAIL PROTECTED] | Fujitsu Siemens Fon: +49-89-636-46021, FAX: +49-89-636-48332 |

Re: SSL deadlock after SSLv3 key exchange A?

2005-09-22 Thread Martin Kraemer
On Thu, Sep 22, 2005 at 06:24:05PM +0200, Martin Kraemer wrote: What is the output with -debug passed to s_client? (appended. Used with the original setup: * global SSLVerifyClient require * 4000+ line ca-bundle file * client invocation: % openssl s_client -debug -CAfile ssl.crt

Re: [PATCH] ssl_ext_lookup #2

2005-09-20 Thread Martin Kraemer
On Fri, Sep 16, 2005 at 09:56:25AM +0100, David Reid wrote: Can we just back out the mod_setenvif stuff from the trunk or is someone going to make it work BTW? I didn't add the code, but unless it works then I'm +1 on it's removal. That said, Dirk claims it works for him, so I'd be

Re: [PATCH] ssl_ext_lookup #2

2005-09-20 Thread Martin Kraemer
On Thu, Sep 15, 2005 at 04:30:50PM +0100, Joe Orton wrote: Can we just back out the mod_setenvif stuff from the trunk or is someone going to make it work BTW? Uhm. Strange. Back at the 'Con, I tested my committed changes with a configuration like: SetEnvIf OID(2.16.840.1.113730.1.13)

Re: Memory leak not fixed from 2003

2005-09-20 Thread Martin Kraemer
On Wed, Aug 31, 2005 at 09:03:23AM +0200, [EMAIL PROTECTED] wrote: What's the goal of the question ? [...] The real question is : Is there any reason to not implement it ? Good question. I committed a patch and marked the bug as FIXED. Thanks for the reminder. Martin -- [EMAIL PROTECTED]

Re: [PATCH] ssl_ext_lookup #2

2005-09-20 Thread Martin Kraemer
On Tue, Sep 20, 2005 at 12:12:53PM +0100, Joe Orton wrote: I haven't traced it: why is match_headers too early? match_headers is a header_parser hook, and header_parser hooks run before auth hooks in request processing; per-dir SSL negotiation is an auth hook. [...] It has

[PATCH] Mixed-cased SSLRequire operators in mod_ssl ?

2005-09-19 Thread Martin Kraemer
On Tue, Aug 02, 2005 at 07:14:10PM +0200, Martin Kraemer wrote: Of course. BTW: do you think case insensitivity for the keywords is a good idea? I do, but I don't know if it would cause misinterpretation for some existing config files. Like, when someone was looking for a string EQ

Re: svn commit: r220307 - in /httpd/httpd/trunk/modules: metadata/mod_setenvif.c ssl/mod_ssl.c ssl/mod_ssl.h ssl/ssl_expr_eval.c

2005-08-05 Thread Martin Kraemer
On Tue, Aug 02, 2005 at 07:14:10PM +0200, Martin Kraemer wrote: I wanted something like SSLRequire committers in SSLPeerExtList(1.3.6.1.4.1.18060.1); to mean at least one extension with an OID of 1.3.6.1.4.1.18060.1 with a value of 'committers' exists in the client cert. I'll

Re: svn commit: r220307 - in /httpd/httpd/trunk/modules: metadata/mod_setenvif.c ssl/mod_ssl.c ssl/mod_ssl.h ssl/ssl_expr_eval.c

2005-08-02 Thread Martin Kraemer
On Tue, Aug 02, 2005 at 12:00:24PM +0100, Joe Orton wrote: On Fri, Jul 22, 2005 at 02:24:50PM +0200, Sander Striker wrote: Joe Orton wrote: On Fri, Jul 22, 2005 at 12:11:56PM -, Martin Kraemer wrote: Author: martin Date: Fri Jul 22 05:11:55 2005 New Revision: 220307 URL

[PATCH] SetenvIf OID(2.16.840.1.113730.1.13) (.*) NetscapeComment=$1

2005-07-22 Thread Martin Kraemer
Hi everybody, Based on a discussion with David Reid and Dirk-Willem van Gulik since yesterday it is possible to allow or deny access based on the (string) values of arbitrary X509 extension fields in an SSL certificate, identified by their object oid (OID): # Require the user to have a certain

[PATCH] #2 versioned libtool.m4 files for FreeBSD

2005-01-24 Thread Martin Kraemer
On Sun, 16 Jan 2005 at 10:06:16 -0800, Justin Erenkrantz wrote: This busts on Darwin as it uses libtool.m4 even though libtool is glibtool. And, libtoolize is usually going to be in the same location as libtool, so why the need for the extra PrintPath call? I think the right way to do it is

Re: [PATCH] #2 versioned libtool.m4 files for FreeBSD

2005-01-24 Thread Martin Kraemer
Oops - wrong dev@ -- please ignore. Martin -- [EMAIL PROTECTED] | Fujitsu Siemens Fon: +49-89-636-46021, FAX: +49-89-636-47655 | 81730 Munich, Germany

[PATCH] Document the 8-byte crypt() restriction

2005-01-17 Thread Martin Kraemer
As we all know, standard DES crypt() uses only 8 characters of the password passed to it. Alas, many people trip over this and expect a long password to give them better protection. (We got security reports for this already). However, there are implementations which provide a concatenation of

[PATCH] More sensible behavior(?) when zero-length pid file is found

2004-02-05 Thread Martin Kraemer
When, with httpd-2.1, the pid file exists but has a zero size, then httpd refuses to start. The attached patch changes this behavior and removes the empty pid file (but only if it exists AND is empty) and logs a message: (17)File exists: Zero-length PID file logs/httpd.pid ignored. to the

Re: [SECURITY-PATCH] cygwin: Apache 1.3.29 and below directory traversal vulnerability

2004-02-04 Thread Martin Kraemer
On Wed, Feb 04, 2004 at 05:48:48PM +0100, Stipe Tolj wrote: Hi list, attached patch fixes the bug# 26152 as described in http://nagoya.apache.org/bugzilla/show_bug.cgi?id=26152 Main purpose was to handle backslashes in the URI to avoid misleading interpretation via the underlying cygwin

Re: Small patch to mod_disk_cache...

2004-02-04 Thread Martin Kraemer
On Sun, Feb 01, 2004 at 01:30:56AM +, Pier Fumagalli wrote: I found a small bug in mod_disk_cache... CacheMinFileSize and CacheMaxFileSize process the argument with atoi(), which simply means that they'll get -1 if the value is quite large (I need to cache some big files)... At the

Re: [1.3 PATCH] log error if returning 500

2004-01-13 Thread Martin Kraemer
On Mon, Jan 12, 2004 at 12:38:59PM -0500, Jeff Trawick wrote: 2.x already does this Of course. 500's should always be logged if generated by Apache. +1. Martin -- [EMAIL PROTECTED] | Fujitsu Siemens Fon: +49-89-636-46021, FAX: +49-89-636-47655 | 81730 Munich, Germany

Re: Proposal: Allow ServerTokens to specify Server header completely

2004-01-13 Thread Martin Kraemer
On Tue, Jan 13, 2004 at 09:35:15AM -0500, Jim Jagielski wrote: I didn't propose this to create (yet another) heated discussion, simply to suggest that we take ServerTokens to its logical conclusion based on some requests I've seen. :) Yes. I agree with Lars that security by obscurity is not

[PATCH] 2.1: UseCanonicalHostname Off results in erroneous Proxy Via header

2004-01-12 Thread Martin Kraemer
Hello everyone, If the configuration sets UseCanonicalHostname Off and enables the proxy, then the Via: header will report not the proxy hosts's ServerName (or any of its configured VHosts's names) as it should, but the *origin hosts*'s name. Example: if I go thru a local apache-2.1 proxy on

Re: consider reopening 1.3

2003-11-16 Thread Martin Kraemer
Marc Slemko [EMAIL PROTECTED] wrote: 3. Threading issues. This is a red herring; threading issues can be a reason why moving to 2.0 wouldn't give someone enough of a reason to make it worthwhile, but they do not block anyone moving to 2.0. if they don't want to use threads, they don't have to

Re: cvs commit: httpd-2.0/docs/manual/mod mod_proxy.html.en

2003-07-24 Thread Martin Kraemer
On Thu, Jul 24, 2003 at 10:29:01AM -, [EMAIL PROTECTED] wrote: martin 2003/07/24 03:29:01 Modified:docs/manual/mod mod_proxy.html.en Log: Without this hint, users often do not know how to use the proxy in an intranet - altogether, Apache sends an anomymous

[PATCH] 2.1: OPENSSL_load_builtin_modules missing in openSSL-0.9.6*

2003-06-11 Thread Martin Kraemer
I fail to link mod_ssl because the symbol OPENSSL_load_builtin_modules() is only present in OpenSSL-0.9.7*, not in -0.9.6* Is the appended patch sufficient, or is the invocation required for anything else beyond initialization of OpenSSL? Martin -- [EMAIL PROTECTED] | Fujitsu

Re: [PATCH] Have logfiles closed on exec

2002-12-11 Thread Martin Kraemer
wheel 0 /dev/fd/0 - p- 0 root wheel 0 /dev/fd/1 - -rw-r- 1 martin kraemer 7971 /dev/fd/2 == /tmp/apa13/logs/error_log * !--#exec cmd=openfds -- from an .shtml page - crw-rw-rw- 1 root wheel 2, 2 /dev/fd/0 - p- 0

Re: [PATCH] Have logfiles closed on exec

2002-12-11 Thread Martin Kraemer
0 /dev/fd/1 - -rw-r- 1 martin kraemer 8812 /dev/fd/2 == /tmp/apa13/logs/error_log - -rw-r- 1 martin kraemer 8812 /dev/fd/15 == /tmp/apa13/logs/error_log - -rw--- 1 martin kraemer0 /dev/fd/19 == /tmp/apa13/logs/httpd.lock.30423 - -rw--- 1

Re: [PATCH] Have logfiles closed on exec

2002-12-11 Thread Martin Kraemer
On Wed, Dec 11, 2002 at 11:49:43AM -0500, Jim Jagielski wrote: Should the default behavior of ap_popenf be to perform the magic cleanup then? We already do so with ap_open_piped_log(). As I said: inside Apache, there's no reason not to change it. But I don't know how many 3rd party modules

Re: [PATCH] Have logfiles closed on exec

2002-12-11 Thread Martin Kraemer
On Wed, Dec 11, 2002 at 12:00:12PM -0500, Jim Jagielski wrote: Looks good! +1 on the ap_psocket_ex(), which should be minor to do. Let me know if you have time to do it; if not, I'll fold it in to the big patch. I gotta hurry back home now to see the kids - dunno yet when I'll have time.

Re: [PATCH] Have logfiles closed on exec

2002-12-11 Thread Martin Kraemer
Here it is: Index: src/CHANGES + *) Certain 3rd party modules would bypass [...] Perhaps you could improve my blurb. It was not written very intelligently For the rest: * the patch as mailed did not apply cleanly here (some tab expansion glitches, but only whitespace diffs, but if

Re: apachectl and options take 2

2002-08-30 Thread Martin Kraemer
On Thu, Aug 29, 2002 at 03:39:35PM -0400, Dave Hill wrote: If I am outvoted on the env veriable (and so far it is 2 against me :-) That is, three: count me in. I dislike the magic environment changes (unless they are at least printed out, so that I see what happens), and I also prefer a

Re: [PATCH] ab.c gnuplot starttime truncation fix

2002-08-30 Thread Martin Kraemer
On Thu, Aug 29, 2002 at 12:49:27PM +0100, Leon Brocard wrote: Thu Aug 29 12:29:31 20010306205713627580 54 54 0 It's truncating the year. Thanks, committed. Martin -- [EMAIL PROTECTED] | Fujitsu Siemens Fon: +49-89-636-46021, FAX:

[PATCH] 1.3: Add support for Berkeley DB4 to mod_auth_db

2002-08-29 Thread Martin Kraemer
2002 13:42:41 - 1.1842 +++ CHANGES 29 Aug 2002 15:46:52 - @@ -1,4 +1,7 @@ Changes with Apache 1.3.27 + *) Added support for Berkeley-DB/4.x to mod_auth_db. + [Martin Kraemer] + *) Win32: Fix one byte buffer overflow in ap_get_win32_interpreter when a CGI script's

Re: HEAD is borked

2002-07-16 Thread Martin Kraemer
On Mon, Jul 15, 2002 at 10:16:59PM -0700, Justin Erenkrantz wrote: Any HTTP/1.1 request is hanging for me (incl. static pages). For me, any HTTP/0.9 request is hanging. GET /CRLF hangs, even if folowed by more CRLFs. Martin -- [EMAIL PROTECTED] | Fujitsu Siemens Fon:

mod_info flaw

2002-05-29 Thread Martin Kraemer
In the output of mod_info, sometimes a container header (like: Limit ...) is duplicated. Here's a snippet from the output of the current www.apache.org server, and at line 26, an extra Limit header was added (dup of 24). (At the end, I attach the relevant part from httpd.conf) (Sorry about line

Re: v1.3.25 (PR#9181)

2002-05-29 Thread Martin Kraemer
On Tue, May 28, 2002 at 09:56:38AM -0700, Sander van Zoest wrote: Can we add in PR#9181? More and more people will run into this issue. -0.5 (it's a feature, and is actively being used by many). Or did you mean add the new directive AcceptPathInfo off? In that case, +1 (but within the time

Re: v1.3.25 (PR#9181)

2002-05-29 Thread Martin Kraemer
On Wed, May 29, 2002 at 12:53:20AM -0700, Sander van Zoest wrote: On Wed, 29 May 2002, Martin Kraemer wrote: On Tue, May 28, 2002 at 09:56:38AM -0700, Sander van Zoest wrote: Can we add in PR#9181? More and more people will run into this issue. -0.5 (it's a feature, and is actively

Re: cvs commit: apache-1.3/src/modules/standard mod_rewrite.c

2002-05-29 Thread Martin Kraemer
On Wed, May 29, 2002 at 05:39:24PM -, [EMAIL PROTECTED] wrote: Fix a problem in mod_rewrite which would lead to 400 Bad Request responses for rewriting rules which resulted in a local path. diff -u -r1.176 -r1.177 I hand-checked the other changes that had sneaked into rev 1.176;

Re: mod_proxy and PR 10246 for 1.3.25

2002-05-29 Thread Martin Kraemer
On Tue, May 28, 2002 at 12:47:17PM -0400, Jim Jagielski wrote: Looks interesting and useful... should we fold into 1.3 (and 2.0)? Second thoughts: * it would be nice if this functionality could be folded into AllowCONNECT. - AllowConnect currently accepts only ports (thus a misnomer, a

Re: cvs commit: httpd-2.0/modules/http http_protocol.c

2002-05-29 Thread Martin Kraemer
On Wed, May 29, 2002 at 02:57:27PM -, [EMAIL PROTECTED] wrote: Ignore leading zeros when parsing hex value for chunk extensions. +/* Skip leading zeros */ +while (*b == '0') { +++b; +} + while (apr_isxdigit(*b) (chunkbits 0)) { This patch

Re: [1.3] Proxy fixes and FWD: Re: [apache-modules] Setting bytes_sent in Request Record while generating all headers by myself in Apache 1.3]

2002-05-29 Thread Martin Kraemer
On Wed, May 29, 2002 at 06:28:24PM +0200, Thomas Eibner wrote: From: Anthony Howe [EMAIL PROTECTED] Subject: Re: [apache-modules] Setting bytes_sent in Request Record while generating all headers by myself in Apache 1.3 Number: 6841 ap_kill_timeout(r); + +

Tagging releases

2002-05-29 Thread Martin Kraemer
On Wed, May 29, 2002 at 02:40:12PM -0400, Cliff Woolley wrote: If you're going to commit it, just do it. That's what my preliminary tag was for... so I had a base from which to selectively include patches. When tagged, APACHE_2_0_37 will != HEAD. :) In the good old days, a tag was a tag

Re: Tagging releases

2002-05-29 Thread Martin Kraemer
On Wed, May 29, 2002 at 11:20:43PM +0200, Kraemer, Martin wrote: ... I forgot to mention that, with Subversion, it's going to be completely different again. Martin -- [EMAIL PROTECTED] | Fujitsu Siemens Fon: +49-89-636-46021, FAX: +49-89-636-47655 | 81730 Munich, Germany

Re: Suggestion (icons)

2002-05-21 Thread Martin Kraemer
On Sat, May 18, 2002 at 06:47:53PM -0400, John Von Essen wrote: So I made one... AddIcon /icons/diskimg.gif .img Thanks for the contribution. Added. Martin -- [EMAIL PROTECTED] | Fujitsu Siemens Fon: +49-89-636-46021, FAX: +49-89-636-47655 | 81730 Munich, Germany

Re: Apache 2.0.36 w/ FreeBSD ... 'hangs' ...

2002-05-21 Thread Martin Kraemer
On Tue, May 21, 2002 at 10:12:17AM -0300, Marc G. Fournier wrote: Just tried the same config on a seperate FreeBSD machine ... both are running 4.6-PRERELEASE right now, and the problem(s) are the same ... connect, hang, kill server and page gets sent across then server goes down ... Same

Re: PROPOSAL: Release 1.3.25

2002-05-16 Thread Martin Kraemer
On Wed, May 15, 2002 at 11:00:42AM +0200, Sander Striker wrote: Pardon? I would have thought that 2.0 is a leap forward in the portability department. Care to explain? Fpr example, did you ever try and build httpd-2.0 on a machine where the compiler does NOT support long long and

Re: [PATCH] 1.3 cygwin: new htdocs/manual/cygwin.html

2002-05-16 Thread Martin Kraemer
On Thu, May 16, 2002 at 02:24:15PM +0200, Stipe Tolj wrote: attached is an update manual html page specific for the Cygwin platform. Please review and add this to the current cvs tree. Both committed. Thanks. Martin -- [EMAIL PROTECTED] | Fujitsu Siemens Fon:

Re: PROPOSAL: Release 1.3.25

2002-05-15 Thread Martin Kraemer
On Thu, May 09, 2002 at 05:27:13PM -0400, Jim Jagielski wrote: Now that N+I is winding down, I have some time available. I'd like to propose that we TR 1.3.25 like May 16 or so. I volunteer to be RM. Unless I hear comments against, I'll update STATUS with the schedule and we'll get this ball

DEFAULT_XFERLOG in apache-1.3

2002-05-13 Thread Martin Kraemer
I noticed that the DEFAULT_XFERLOG macro definition is supplied but not used anywhere in apache_1.3. The only place where we use the definition is in httpd -V where we print its setting. % find . -type f | xargs grep -i DEFAULT_XFERLOG ./src/main/http_main.c:#ifdef DEFAULT_XFERLOG

[PATCH] 1.3: Stricter check on request_line format

2002-05-13 Thread Martin Kraemer
We have been discussing this topic in the past: a stricter check should be applied to the request line, in order to prevent arbitrary user input to end up in the access_log and error_log. It could be misused to spoof accesses to nonexistent (or inaccessible) resources, of course without the

Re: [PATCH] 1.3: Stricter check on request_line format

2002-05-13 Thread Martin Kraemer
Okay, once again _with_ patch: We have been discussing this topic in the past: a stricter check should be applied to the request line, in order to prevent arbitrary user input to end up in the access_log and error_log. It could be misused to spoof accesses to nonexistent (or inaccessible)

Re: [PATCH] 1.3: Stricter check on request_line format

2002-05-13 Thread Martin Kraemer
On Mon, May 13, 2002 at 01:58:38PM +0200, Kraemer, Martin wrote: @@ -1045,12 +1045,26 @@ r-assbackwards = (ll[0] == '\0'); r-protocol = ap_pstrdup(r-pool, ll[0] ? ll : HTTP/0.9); -if (2 == sscanf(r-protocol, HTTP/%u.%u, major, minor) +if (3 == sscanf(r-protocol,

[john@cavaliers.org: proxy_http1.1_chunking.patch]

2002-05-02 Thread Martin Kraemer
Ralf, do you have a mod_ssl patch for the current 1.3.25-dev proxy? Or could you make one? Martin -- [EMAIL PROTECTED] | Fujitsu Siemens Fon: +49-89-636-46021, FAX: +49-89-636-47655 | 81730 Munich, Germany ---BeginMessage--- -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi

Re: Going GA

2002-04-08 Thread Martin Kraemer
On Fri, Apr 05, 2002 at 11:38:34PM +0200, [EMAIL PROTECTED] wrote: Hate to be a spoilfun - but this GA tendency feels a bit.. sudden to me :-) Yes, I have the same feeling. After all, on my FreeBSD-4.5 the server has never been able to run stable enough to use it for anything.

Proxy Problems (was: Re: 1.3.24 +1)

2002-03-22 Thread Martin Kraemer
On Thu, Mar 21, 2002 at 04:04:53PM -0800, Roy T. Fielding wrote: Tarball tested on RH Linux 2.2.16-22 with no problems. +1 Roy I just notice that there are problems with the proxy. They manifest in a combination of an old proxy (Apache/1.3.13-dev) and the new proxy (Apache/1.3.24) in a

Re: 1.3.24 +1

2002-03-22 Thread Martin Kraemer
On Fri, Mar 22, 2002 at 07:42:42AM -0500, Jim Jagielski wrote: Also +1 on MacOS X 10.1.3 (Darwin 5.2), Soalris 8 (sparc), RedHat 7.2 and A/UX 3.1.1 and +1 on FreeBSD-4.5 Martin -- [EMAIL PROTECTED] | Fujitsu Siemens Fon: +49-89-636-46021, FAX: +49-89-636-47655 | 81730

Re: Proxy Problems (was: Re: 1.3.24 +1)

2002-03-22 Thread Martin Kraemer
On Fri, Mar 22, 2002 at 09:40:44PM +0100, Kraemer, Martin wrote: (192.168.69.1) (pgtm0035) client -- Apache-1.3.13 -- Apache-1.3.24 Proxy Proxy *and* Origin Server No, even worse: I now have two Apache-1.3.24 copies

Apache-1.3 proxy: Broken Server: header

2002-03-14 Thread Martin Kraemer
On Wed, Mar 06, 2002 at 04:40:04PM +0200, Graham Leggett wrote: Is there any specific behaviour of the v1.3 proxy that violates HTTP/1.1? Just noticed today when I tried the Apache-1.3 proxy: % netcat myproxy 80 . HEAD http://microsoft.com/favicon.ico HTTP/1.0 . HTTP/1.1 404

Apache-1.3 proxy: X-Cache question

2002-03-14 Thread Martin Kraemer
--snip-- % netcat localhost 8080 . HEAD http://apache.org/favicon.ico HTTP/1.0 . HTTP/1.1 200 OK Date: Thu, 14 Mar 2002 11:20:48 GMT Server: Apache/1.3.24-dev (Unix) Accept-Ranges: bytes Cache-Control: max-age=86400 Content-Length: 766 Content-Type: text/plain ETag:

Re: Apache-1.3 proxy: X-Cache question

2002-03-14 Thread Martin Kraemer
On Thu, Mar 14, 2002 at 12:25:47PM +0100, Kraemer, Martin wrote: X-Cache: MISS from localhost Should the X-Cache line not rather read: X-Cache: MISS from localhost:8080 I just looked at squid's implementation. It doesn't append the port either. But IMHO that's a bug too. Martin

domain.com in htdocs?

2002-02-15 Thread Martin Kraemer
On Sat, Feb 09, 2002 at 08:54:16PM -, [EMAIL PROTECTED] wrote: rbowen 02/02/09 12:54:16 Modified:htdocs/manual/mod core.html.en Log: Added example to ServerAlias doc. +pExample:/p + +pre +lt;VirtualHost *gt; +ServerName

Re: FW: mod_proxy/9772: proxy: Ignoring duplicate HTTP header...

2002-02-14 Thread Martin Kraemer
On Thu, Feb 14, 2002 at 09:45:10AM +0200, Graham Leggett wrote: According to RFC2616, a content-type SHOULD be present. If it is not present, then the client can either guess what it is based on file extension or looking at a few bytes, otherwise it should be application/octet-stream. So -

  1   2   >